Out-of-Bounds Write Vulnerability in Substance3D Viewer by Adobe

CVE-2025-49569

What is CVE-2025-49569?

Substance3D Viewer, specifically versions 0.25 and earlier, has been identified as vulnerable to an out-of-bounds write issue. This vulnerability allows for arbitrary code execution within the context of the current user. Exploitation requires user interaction, as it necessitates opening a specially crafted file that triggers the flaw, potentially compromising user data and system integrity. It is crucial for users to be aware of this risk and exercise caution when handling files from untrusted sources.

References